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ListiHg of Claims; 

1. (Previously Presented) A method for providing security. in. password-based' access to 
computer networks, the network including, a server and a remote user, comprising the steps of: 

(a) signing a phrase by a security chip of the server using an encryption key, wherein 
fee encryption key is known only to. the security -chip; 

(b) associating the signed phrase -with the remote user; 

(c) signing the phrase with the .encryption key obtained by the security chip when a 
•requestfor access to the computer network is received, from the remote user; 

(d) comparing the phrase signed with the obtained encryption key with the signed 

phrase associated with the remote user; and 

(e) granting access to the remote user if the phrase signed with the obtained 
encryption key is the same as the stored signed phrase associated with, the remote user. 

2. (Previously Presented.) The method of claim f wherein the signing step (a) comprises: 
(al) creating a public key and a private key pair for the remote user by the security 

chip; and 

(a.2) signing the phrase with the private key of the remote user by the security chip, 
wherein the private key of the remote user is known only to the security chip. 

3 . (Original) The method of claim 2 wherein, the -associating, step (h) forth er co.rap.ri ses ; 
(b 1 ) storing the signed phrase associated with the remote user. 
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4. (Original) The method of claim 3, wherein the signing (c) comprises: 
f c 1 ) receiving .a password Xrpm the remote user; 

(c2) sending the received password and the phrase to the security chip; 

(c3) loading the private key of the remote user; and 

(c4) signing the phrase with the loaded private key by the security chip. 

5. (Original) The method of claim 4> wherein the comparing step (d) comprises: 

(dl) comparing the phrase signed with the loaded private key with the stored signed 
phrase associated with the remote user, 

6. (Previously Presented) The method of claim 3, wherein the granting step (e) comprises: 
(el ) grattiing access to the remote user if the phrase signed with the loaded private key 

is the same as the stored signed phrase associated with the remote user, 

7. (Pre viously Presented) The method of claim 1 , wherein the signing step (a) comprises: 
(a!) signing a password for the remote user by the security chip with a private key of 

the seeority chip, wherein the private key of the security chip is kno wn only to the security chip. 

8. (Original) The method of claim 7, wherein the associating step (b) comprises; 
(b 1 ) associating the signed password with the remote user; and 

(hi) storing the signed password associated with the remote user. 
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9. (Original) The method of claim 8, wherein the signing step (e) comprises: 
(el) receiving the password from the remote user; 
(c2) sending the received password to the security chip ; 
(c3) loading the private key of the security chip; and 

(c4) signing the -received password with, the loaded private key by the security chip. 

I. 0, (Original) The method of claim 9, wherein the comparing step (d) comprises: 

(d 1 ) comparing the signed received password with the stored, signed password. 

I I , (Original) The method of claim 10, wherein the granting step (e) comprises: 

(el) granting access to the remote user if the signed received password is the same as 
the stored signed password. 

1 2. (Previously Presented) The method of claim 1 , wherein the signing step (a.) comprises; 
(al) creating a. blob for the remote user, wherein, the blob comprises a password for the 

remote user si gned with, a private key of the security chip, wherein the pri vate key of the security 
chip is known only to the security chip, 

13. (Original.) The method of claim 1.2, wherein the associating step (b) comprises: 
(b 1.) associating the hi oh with the remote user; and 

(b2) storing the blob associated with the remote user. 
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14. (Original) The method of claim 13, wherein the signing step (c) comprises: 
(el) receiving the password from the remote user; 

(c2) sending the received password and the blob associated with. the remote user to the 
security chip; and 

(c3) decrypting the blob associated with the remote user using a public key of the 
security chip to obtain the stored password, 

1 5. (Original) The method of claim. 1.4, wherein the comparing step (d) compri ses: 
(d!) comparing the stored password with the received password. 

1.6. .(Original) The method of claim 15* wherein the- panting step (e) comprises: 

(el) granting access to the remote user if the stored password is the same as the 
received password, 

17. ( Original) The m ethod of claim L farther' comprising: 

(1) denying access to the remote user if the phrase signed with the obtained, 
encryption key is the same as the stored signed phrase associated with the remote user. 

18.. (Previously Presented) A method for providing security in password-based access to 
computer networks, the network including a server and a remote user, comprising the steps of: 

(a) creating a public key and a private key for the remote user by a security chip of the 

server; 
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(b) signing a phrase with the private key of the remote user by the security chip, 
wherein the private, key of the remote user is known only to the security chip; 

(e) associating the signed phrase with the remote user; 

(c) storing the signed phrase associated with the remote user; 

(d) . receiving a password from the remote user* 

(e) sending the received password and the phrase to the security chip;. 
■(f) loading the pri vate key of the remote user; 

(g) signing the phrase with the loaded private key by the security chip; 

(h) comparing the phrase signed with the loaded private key with the stored signed 
phrase associated with the remote user; and 

(g) granting access to the remote user if the phrase signed with the loaded pri vate key 
is the same as the stored, signed phrase associated with the remote user. 

19. (Previously Presented) A method for providing security in password-based access to 
computer networks, the network including a server and a remote user, comprising the steps of; 

(a) signing a password tor the remote user by a security chip of the server with a 
private key of the security chip, wherein the pri vate key of the security chip is known only to the 
security chip; 

•(b) associating tire signed password with the remote user; 

(e) storing the signed password associated with the remote user; 

(d) receiving the password from the remote user; 

(e) sending the received password to the security chip; 

( f) loading the pri vale key of the security chip ; 
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(g) signing the received password with fee loaded private key by the security chip; 

(h) comparing the signed received. password with the stored signed password.; and 

(i) granting access to the remote user if the signed received password is the same as. 
the stored signed password. 



20. (Previously Presented) A. method for providing security m password-based access to 
computer networks, the 'network including a server and a remote user, comprising the steps of: 

(a) creating a hioh for the remote user, wherein the blob comprises a password for the 
remote user signed with a private key of a security chip of the server, wherein the private key of 
the security chip is known only to the security chip; 

(h) associating the blob with the remote user; 

(c) storing the blob associated with the remote user; 

(d) receiving the . password, from the .remote user; 

(e) sending the received password and the blob associated with the remote user to the 

security chip; 

(fl decrypting- the blob associated with the remote user using -a public key of the 
security, chip to obtain, the stored password; 

(g) comparing fee stored password with the received password; and. 

(h) granting access to the remote user if the stored password is the same as the 
received password. 
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21. (Previously Presented) A computer readable medium with program instructions for 
providing security in password-based access to completer networks, the network including a: 
server and a remote user, comprising the instructions tor: 

(a) signing a phrase by a security chip of the server using an encryption key, wherein 
the encryption key is known only to the security chip; 

(b) associating the signed phrase with the remote user; 

(e) sighing the phrase with the encryption key obtained by the security chip when a 
request for access to the computer network is received from the remote user; 

(d) comparing the phrase signed with, the obtained encryption key with the signed 
phrase associated with the remote user; and 

(e) granting access to the remote user if the phrase signed with the obtained 
encryption key is the same as the stored signed phrase associated with the remote user. 

22. (Previously Presented) The medium, of claim 21, wherein the signing instruction (a) 

comprises instructions for: 

(a I) creating a public key and, a private key pair for the remote user by the security 
chip ; and 

(a2) signing the phrase with the private key of the remote user by the security chip, 
wherein the private key of the remote user is known only to the security chip. 

23. (Original) The medium of claim 22, wherein the associating instruction (bj further 
comprises ■instructions for: 

(bl.) storing the signed phrase associated with the remote user. 

-8- 



Attorney Docket: 8PS920010152US1/2303P 

24. (Original) The medium of claim 23, wherein the signing instruction (c) comprises: 
instructions for: 

(c I ) receiving a password from the remote user; 

(c2) sending the received password -and the phrase to the security chip; 

(c3) loading the private key of the remote user; and 

(c4) signing the phrase with the loaded private key by the security chip. 

25. (Original) The medium of claim 24, wherein the comparing mstractten (d) comprises 
instructions for: 

(dl) comparing the phrase signed with the loaded private key with the stored signed 
phrase associated with the remote user. 

26. (Previously Presented) The medium, of claim 25, wherein die granting iristruction. (e) 
comprise instructions for: 

(el )• granting access to the remote user if the phrase signed with the loaded private key 
is the same as the stored signed phrase associated with the remote user. 

27. (Previously Presented) The medium of claim 21, wherein the signing instructions (a) 
comprises instructions for: 

(a!) signing a password for the remote user by the security chip with a private key of 
the security chip, whereinthe pri vate key of the -security chip is known only to the security chip. 
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28. (Original) The medium of claim 27, wherein the associating -instruction (b) comprises 

instructions for: 

(b I ) associating the signed password with the remote user; and 
(b2) storing the signed password associated with the remote user. 

29. (Original) The medium of claim 28, wherein the signing instruction (c) comprises 
instructions for: 

(cl ) receiving the password from the remote user; 

(c2) sending the received password to the security chip; 

(c3) loading the pri vate key of the security chip; and 

(c4) signing the received password with the loaded private key by the security chip, 

30, (Original) The. medium of claim 29, wherein the : comparing instruction (d) comprises 
instructions for: 

(dl) comparing the signed received password with the stored signed password. 

31 , (Original) The medium of clairri 30, wherein the granting instruction (e) comprises 
instructions for; 

(el) granting access to the remote user if the signed received password is the same as 
the stored signed password. 
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32. (Previously Presented) The medium of claim 27, wherein the signing instruction (a) 
comprises instructions for: 

fal) creating a blob for the remote user, wherein the: Mob comprises a password for: the 
remote user signed with a private key of the security chip, wherein the private key of the security 
chip is known only to the security chip, 

33. (Original) The medium of claim 32,. wherein the associating instruction (b) comprises 
insu'UctiorJs for; 

(hi) associating the blob with the remote user; and 
(b2) storing die blob associated with the remote user. 

34. (Original) The medium of claim 33, wherein the signing instruction (c) comprises 
instructions for: 

(cl) receiving the password from the remote user; 

(c2): sending the received password and the blob associated with the remote user to the 
security chip; and 

(c3) decrypting die blob associated with the remote user using a public key of the 
security chip to obtain the stored password. 

35. (Original) The medium of claim 34, wherein the comparing instruction (d) comprises 
instructions for: 

(di) comparing the stored password with the received password. 
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36, {Original) The medium of claim 35, wherein the granting instruction (e) comprises 
instraetipns for: 

(el) granting access to the remote user if the stored password, is the same as the 
received password. 

37, (Previously Presented) The medium of claim 27, further comprising instructions for: 

(f) denying access to the remote user if the phrase signed with the •obtained 
encryption key is the same as the stored signed, phrase associated with the remote user. 

38, (Previously Presented) A computer readable medium with program instructions tor 
providing security in password-based access to computer networks, the network including a. 
server and a remote user, comprising the iastructiofts for: 

(a) creating a public key and a private key for the remote user by a security chip of the 

server; 

(b) signing a phrase with the private key of the remote user by the security chip, 
wherein the pri vate key of the remote user is known only to the security chip ; 

(e) associating the signed phrase with the remote user; 

(e) storing the signed phrase associated with the remote user; 

(d) receiving a password from the remote user; 

(e) sending the received password and the phrase to the security chip; 

(f) loading the private key of the remote user; 

(g) signing the phrase with the loaded pri vate key by the .security chip; 
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fh) comparing the phrase signed with the loaded private key with the stored signed 
phrase associated with the remote user; and 

•(g) granting access to the remote user if the phrase signed with the loaded private key 
is 'the same as the stored signed phrase associated with the remote -user, 

39, (Previously Presented) A computer readable medium, with -program instructions for 
providing: security in password-based access to computer networks, the network including a 
server and a remote user, comprising the instructions, lor; 

(a) signing a password for the remote user by a security, chip of the server with a. 
private key of the security chip, wherein the private key of the security chip is known only to the 
security chip; 

(b) associating the signed password with the remote user; 

(c) storing the signed password associated with the remote user; 

(d) receiving the password from the remote user; 

(e) sending the received password to the security chip; 

(f) loading the private key of the security chip; 

{») signing the received password with the loaded private key by the security chip; 

(h) comparing the signed received password, with the stored signed password; and 

(i) granting access to the remote user if the signed received password is the same as 
the stored signed password. 
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40. (Previously Presented) A. computer readable medium with program instructions for 
providing security in password-based access to computer networks, the. network including a 
server and a remote user, comprising the Instructions for; 

(a) creating a blob for the remote u ser, wh erein the blob comprises a password for the 
remote user signed with a private, key of a security chip of the server, wherein the private key of 
the security chip is. known only to the security chip; 

(b) associating the blob with the remote user; 

(c;j storing the blob associated with the remote user; 

(d) receiving the password from the remote user; 

(e) sending the received password and the blob associated with, the .remote user to the 
security chip; 

(t) decrypting the blob associated with the remote user using a public key of the 
security chip to obtain the stored password; 

(g) comparing the stored password with the received password; and 

(h) granting access to the remote user if the stored password is the same as the 
received password, 

41. (Previously Presented) A system, comprising: 
an encryption key associated with a remote user; 

a table, wherein the table stores a signed phrase associated with the remote user, wherein 
the stored signed phrase is signed with the encryption key associated with the remote user; and 
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a. security chip, wherein when the security chip receives a request .for access to the system 
torn the remote user, the security chip signs a phrase with the encryption key associated with the 
remote user* wherein the encryption key is known only to the security chip, 

wherein the system compares the phrase Signed with the encryption key associated with 
the remote user with the stored signed phrase associated with the remote user, wherein the system 
•grants access to requesting remote user if the phrase signed with the encryption key associated 
with the remote user is the same as the stared signed phrase associated with the remote user. 



